CISA’s Nov 12 federal remediation deadline is nearing for exploited GPUStack flaw CVE-2026-102895. Default configurations before 2.2.0 can expose admin access without login; upgrade to 2.2.0 or later and follow triage guidance.

GPUStack’s original security advisory lists affected versions before 2.2.0, patched version 2.2.0, and critical severity 9.8. The July 31 advisory predates CISA’s November 9 catalog entry.

Published 11 Nov 2026 · 04:04 UTC

CISA / GPUStack ↗ · Source dated 9 Nov 2026

CISA’s Nov 12 federal remediation deadline is nearing for exploited GPUStack flaw CVE-2026-102895. Default configurations before 2.2.0 can expose admin access without login; upgrade to 2.2.0 or later and follow triage guidance. · ournews.ai